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Description 
Technical Field 

[0001 ] This Invention relates to a method for securing 
safety of electronic information in storage of electronic 

infomiation or in exchange of electronic infomiation and 
also to a method of securing the identity with an original 
of electronic Infomiation. 

Background Art 

[0002] A large number of computers have been and 

are being connected to a communication network to form 
a system such that each of the computers can be con- 
nected to many and unspecified persons over a commu- 
nication path. Therefore, there is the possibility that also 
electronic information stored in an external storage ap- 
paratus of a computer such as a hard disk apparatus may 
be accessed by a third party having no authority over a 
communication path and stolen or altered. 
[0003] Also transmission of electronic information over 
a communication path such as exchange of personal in- 
formation by an electronic mail and so forth, distribution 
of an application program such as a game program or a 
business program or distribution of data extracted from 
a database and edited has been and is increasing. Where 
communication environments open to the outside are 
used for such electronic infomiation exchange, there is 
the possibility that a third party who is not a receiving 
party may acquire electronk; infomiation being commu- 
nicated through an intercepting or stealing action and 
utilize the electronic infomnation. Particulariy where in- 
fomiation is distributed for pay or infomiation relating to 
privacy is transmitted, it is necessary to take a counter- 
measure so that electronic information being communi- 
cated may not be stolen readily. 
[0004] WO GO 64096 A discloses an encrypted com- 
munication system for data communication in an encrypt- 
ed status. A transmission device and a reception device 
are provided with pseudo-random number sequence 
generating means for generating the same pseudo-ran- 
dom number sequence based on key information. A 
transmission device interprets a pseudo-random number 
sequence based on a preset transposition rule to thereby 
specify a plurality of exchange positions for a bit-string 
in a regular text. 

[0005] DE 26 41 337 A discloses a ciphering method 
characterized In that an electronic infomiation file is di- 
vided into a plurality of infomnation elements; the divided 
information elements are selected and combined with 
their order changed to produce one or more infomnation 
blocks such that said Infomiation blocks are redlvided 
into the original infomnation based on said division ex- 
traction data to restore the original electronic information. 
[0006] In order to disable utilization of electronic Infor- 
mation by a third party having no relation even if the third 
party acquires the electronic infonnation, a method is 



used to assure the secrecy of electronic infomiation 
through encipherment of the electronic information. En- 
ciphemient techniques developed for the object Just de- 
scribed include various systems such as encipherment 

5 systems whrch use a symmetrical key and another enci- 
pherment systems which use an asymmetrical key. 
[0007] However, even if such enciphemient tech- 
niques are used, since stored electronic information or 
electronic infomiation being transmitted includes all in- 

10 formation, if someone acquires a deciphemrient method 
through some means such as deciphering of the cipher, 
then the person can decipher the cipher readily to acquire 
the useful information. Also alteration or counterfeiting is 
possible, and attention must always be paid to whether 

15 or not information extracted or received keeps true and 
con^ect infomiation. Particularly where electronic infor- 
mation for which high security is required such as au- 
thentication infomnation of the person itself is stored or 
transmitted, the conventional methods are not free from 

20 anxiety. 

[0008] If information stored or being communicated is 
subject to alteration or missing, then most of the infor- 
mation extracted or received cannot be utilized correctly, 
and use of the incorrect infomiation as it is may give rise 
25 to some trouble. Also the fact Itself that Information is 
known to a third party sometimes matters. Accordingly, 
a convenienttechnique for confimiing that received elec- 
tronic infomiation has the identity with that which has 
been forwarded and for confirming that electronic infor- 
30 mation is used legally is demanded. 

[0009] Therefore, it is an object of the present invention 
to provide a technique of assuring the security of elec- 
tronic infonnation by working electronic information to be 
stored or transmitted so that, even If the electronic infor- 
ms mation stored or being transmitted is stolen, it cannot be 
utilized thereby to decrease the value of the Infomiation 
and to provide a method of assuring the genuineness of 
information which a user has extracted or received to 
restore. 

40 

Disclosure of the Invention 

[0010] The present invention discloses a method for 
assuring security of electronic infonnation according to 

45 the appended claim 1 . 

[001 1 ] According to the security assurance method for 
electronic information of the present Invention, part of 
infomiation is deposited to the certification station and, 
when the original infonnation is required, the infonnation 

50 block in hand and the information block owned by the 
other party as well as the infomiation block deposited to 
the certification station are joined to restore the infomna- 
tion. Accordingly, even if one of the parties concemed 
and the certification station alters its information, the fact 

55 of the alteration is found cleariy, and since the information 
stored by the certification station is not the entire Infor- 
mation but part of the information, the infonnation capac- 
ity required for the certification station may be small. Fur- 
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ther, since the function of authenticating the security of 
information is divided into the three parties, it is an ad- 
vantage in administration of the certification station that 
the burden on the certification station is light. 
[001 2] It is to be noted that the division and formation 
data may be stored or transmitted separately. 
[001 3] According to the security assurance method for 
electronic information of the present invention, an elec- 
tronic infomnation file to be stored or sent is divided into 
a suitable number of information elements of suitable 
lengths and then shuffled and combined to produce one 
or more infomriatlon blocks, and the infomnation bloclcs 
are stored Into an external storage apparatus or sent to 
a recipient. 

[0014] Accordingly, since the electronic infomnation 
stored or being communicated are in a state wherein it 
is not useful unless it is restored like paper Information 
broken by a shredder, even if a third party who does not 
have restoration means accesses the electronic informa- 
tion, the electronic Infomnation is not leaked as valuable 
information, and therefore, it is secure. 
[001 5] Also where only one infomnation block is fomned 
for an electronic Information file, since the order of the 
infomnation elements placed in the infomnation block is 
different, it is difficult to read or discriminate the Informa- 
tion. However, where a plurality of infomnation blocks are 
formed and stored or sent separately from each other, 
then even If a third party steals one of the infomnation 
blocks, the entire contents of the electronic infonmation 
are not stolen, and consequently, naturally the security 
is Improved further. 

[0016] Also it is possible to apply a cipher technique 
to store or send the infomnation blocks to achieve further 
improvement of the security. 

[0017] The division and fomnation data is data neces- 
sary for division and combination used when the infor- 
mation blocks are fomned, and is stored or sent together 
with the Infomnation blocks. The division and fomnation 
data includes position infonmation and length information 
of each infomnation element In the electronic infomnation 
file. As the importance is attached to the security, the 
division and fonnation data is handled separately from 
the infomnation blocks. 

[001 8] A person who extracts or receives the electronic 
infonmation collects all of the information blocks and uses 
the division and fomnation data to separate the Informa- 
tion elements included In the Individual infomnation 
blocks and re-couple the infomnation elements in the cor- 
rect order to restore the original electronic infomnation. 
[001 9] When the electronic information Is to be stored 
into an extemal storage apparatus of a computer, infor- 
mation blocks and division and fomnation data may be 
produced by processing the electronic Infomnation file In 
such a manner as described above and stored Into the 
extemal apparatus. 

[0020] Where the security assurance method of the 
present invention is applied to a storage apparatus, even 
if the storage apparatus is accessed by a third party, this 
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does not lead to leakage of valuable infomnation, and the 
security in storage of electronic infomnation by the com- 
puter is Improved. 

[0021 ] It is to be noted that, where electronic Inf omna- 

5 tion is to be sent, preferably an electronic Infonmation file 
is divided Into a plurality of information elements and the 
divided infonmation elements ara selected and combined 
to produce a ptural'rty of information blocks, and then the 
Infomnation blocks are transmitted in a separate condition 

10 from each other to a recipient and division and formation 
data is transmitted to the recipient along with the sepa- 
rated information blocks, whereafter the recipient side 
receiving the data re-divides and integrates the infomna- 
tion elements included in the infomnation blocks into the 

15 con-ect order based on the division and formation data 
to restore the original electronic infonmation. 
[0022] When an electronic infonmation file is to be sent, 
preferably it has a higher degree of security because a 
communication path used is sometimes widely open to 

20 the public. Also in such an instance, where a plurality of 
infonmation blocks are sent by different communication 
means, a considerably high degree of security can be 
assured. 

[0023] Since the infonmation blocks In the present in- 
25 vention Individually cany mere part of necessary Infor- 
mation, even if some infonmation block is acquired during 
communication, the entire infonmation cannot be re- 
stored. 

[0024] Accordingly, preferably at least one of the infor- 
30 mation blocks and the division and fomnation data is 
transmitted to the recipient by second transmission 
means different from the transmission means for the oth- 
er electronic information. 

[0025] Where all of the infonmation blocks and the 6i- 

35 vision extraction data are not sent using the same trans- 
mission means but some of them are transmitted by dif- 
ferent transmission means, even if a thief is present mid- 
way of a communication path, it cannot collect all infor- 
mation, and this provides a higher degree of security. 

^ [0026] If the Infonmation blocks are sent at different 
points of time from each other orsent using different com- 
munication routes from each other, then it is very difficult 
to steal all Information blocks without a miss on the way 
of the communication path, and only part of the infomna- 

45 tion can be acq uired to the utmost Therefore, even when 
authentication data of the person itself is sent, it can be 
preventedthatathird party steals the authentication data. 
[0027] It is to be noted that preferably the division and 
fomnation data includes data for confirmation of the orig- 

50 inality of the electronic infonmation file. The identity be- 
tween the electronic information file which has been in- 
tended to be sent and the electronic information restored 
by the recipient can be confirmed with a high degree of 
certainty by verifying the fact that the division and forma- 

ss tion data and contents of the received infonmation blocks 
are consistent. 

[0028] Further, the identity between the electronic in- 
formation file which has been intended to be sent and 
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the electronic information restored by the recipient may 
be conflmned by placing an Infomiation element selected 
from among the information elements, that is, a key ele- 
ment, into infonmation blocks to be sent along different 
communication routes so that the key element may be 
included commonly and verifying, when the infonnation 
elements are to be integrated, the identity between the 
key elements included in an overlapping relationship in 
the received infomiation blocks. 
[0029] It is to be noted that, in order to confirm that the 
electronic infomiation sent is identical with the electronic 
information file which has been intended to be sent, also 
a simple method of checking whether or not the number 
of words included in the individuat files coincide with each 
other is applicable. 

[0030] If the security assurance method for electronic 
information of the present invention is used for on-line 
sales of an application program or a database, then even 
if any other person than a legal purchaser steals elec- 
tronic infomiation being communicated, only part of the 
information can be acquired, and consequently, the pro- 
gram cannot be executed or useful infonnation cannot 
be acquired. Accordingly, since there is no motivation of 
stealing electronic infomnation being communicated, the 
merit to the selling party is not damaged by theft 
[0031] Further, if the security assurance method for 
electronic information of the present invention is applied 
to send authentication data of the person itself, then in- 
formation exchange with a high degree of security can 
be achieved while theft or forgery by a third party is pre- 
vented with certainty. 

[0032] If further strict assurance is required, preferably 
the original of electronic information to be sent is stored, 
and electronic infomnation restored by the recipient side 
is sent back and verified with the original of the electronic 
information to confirm the identity. 
[0033] Furthermore, if the electronic infonnation re- 
stored by the recipient is sent back and verified with the 
stored original of the electronic information to confimri the 
identity, then even when the electronic infonnation is al- 
tered during communication or misses partly, this can be 
discriminated immediately to take a countemieasure. 
[0034] It is to be noted that the information blocks ac- 
quired by the recipient may be sent back as they are and 
verified with the original of the electronic information, if 
inspection is performed for each of the infomiation 
blocks, then a damaged portion can be specified, and 
this facilitates a countermeasure. 
[0035] If a difference from the original is detected, then 
considering the reliability of the communication path 
doubtful, the information may be sent again or the com- 
munication path may be changed to prevent interference 
of a person who has altered the infonnation. It is to be 
noted that also the recipient can utilize the electronic in- 
fonnation with confidence when a result of the verification 
is received from the transmitting person. 
[0036] The reliability is improved if a transfer station or 
so called transfer authority which is neutral and impartial 



is Interposed in the transmission means so that infonna- 
tion transmission may be perfomned through the transfer 
station. The transfer station transfers an infonnation 
block included In an infonnation package sent thereto to 

5 the recipient based on address information. 

[0037] Where such a route as described above is used 
to send the information blocks, since the appearances 
of the divided information blocks are different from each 
other, it is difficult for a thief midway of the communication 

10 path to collect all information blocks necessary to restore 
the electronic information file, and the security is further 
improved. 

[0038] Particularly, even if only a portion including the 

division extraction data is sent through the transfer sta- 
15 tion, the reliability of the entire system is improved. 
[0039] It is to be noted that, if the transfer station ap- 
plies a cipher technique to transfer the electronic infor- 
mation, then a higher degree of security can be assured. 
[0040] Further, the transmitted information may not 
20 necessarily be used immediately by the recipient. There- 
fore, the transfer station may keep the infonnation blocks 
sent by the transmitting party such that the recipient may 
cause the transfer station to transmit the infonnation 
blocks when necessary so that it may integrate the col- 
25 lected information blocks to restore and utilize the elec- 
tronic infonnation. 

Brief Description of the Drawings 
30 [0041] 

FIG. 1 is a block diagram illustrating a concept of a 
security assu ranee method for electronic infonnation 
of the present Invention; FIG. 2 is a view illustrating 

35 an operation of the present invention; FIG. 3 is a flow 
diagram illustrating a first embodiment of the security 
assurance method for electronic infonnation of the 
present invention; FIG. 4 is a block diagram of a sys- 
tem which uses the present embodiment; FIG. 5 is 

^ a flow diagram illustrating a second embodiment of 
the security assurance method for electronic infor- 
mation of the present invention; FIG. 6 is a block 
diagram of a system which uses the present embod- 
iment; FIG. 7 is a flow diagram illustrating a third 

45 embodiment of the security assurance method for 
electronic information of the present invention; FIG. 
8 is a block diagram of a system which uses the 
present embodiment; FIG. 9 is a flow diagram illus- 
trating a fourth embodiment of the security assur- 

50 ance method for electronic Information of the present 
invention; FIG. 10 is a block diagram illustrating a 
fifth embodiment of the security assurance method 
for electronic information of the present invention 
and FIG. 1 1 is a block diagram illustrating a function 

55 of a certification station or certification authority to 
which the present invention is applied. 
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Best Mode for Carrying out the Invention 

[0042] The security assurance method for electronic 
information of the present invention is a method of maid ng 
the security of electronic information certain in storage 
or communication of an electronic infonnation file. Ac- 
cording to the method of the present invention, even if 
someone steals electronic information during storage or 
during communication, the value of the infonnation which 
can be acquired by theft is reduced to prevent damage 
by the theft and the gain of the theft is reduced to prevent 
a stealing action. Further, if missing of infonnation or al- 
teration to infonnation occurs during communication, 
then this fact is detected thereby to assure the security. 
[0043] in the following, details of the present invention 
are described with reference to the drawings. 
[0044] FIG. 1 is a block diagram lilustrating a concept 
of the present invention, and FIG. 2 is a view illustrating 
an operation of the present invention. FIG. 1 Illustrates, 
as an example of fomn of use of the present invention, a 
case wherein an electronic infonmation file is divided into 
six infonnation elements and divided into two infonnation 
blocks. 

[0045] In the security assurance method for electronic 
information of the present invention, an object electronic 
infonnation file 1 is divided into a suitable number of in- 
formation elements 2. Here, for simplification, a case 
wherein the electronic infonnation file 1 is divided into six 
information elements A, B, C, D, E and F is described as 
an example. The information elements 2 need not be 
divided at a position at which they have significance as 
information, and in order to reduce the possibility of steal- 
ing, preferably the infonnation elements 2 are obtained 
by merely dividing the electronic infonnation file 1 phys- 
ically. 

[0046] The order of arrangement of the infomiation el- 
ements A, B, C, D, E and F obtained by the division is 
changed and they are grouped suitably to fonn a suitable 
number of infonnation blocks 3. 
[0047] In the example shown, the information ele- 
ments A, D and E are distributed in the first infonnation 
block 3, and the infonnation elements B, C and F are 
distributed in the second infonnation block 3. It is to be 
noted that also the order of arrangement of the informa- 
tion elements in each infonnation blocks can be changed 
arbitrarily. 

[0048] Even if such information blocks 3 are read out 
by a third party, since the Information elements A, 8, C, ... 
are not arranged In a significant an^ngement, contents 
of the electronic infonnation cannot be read if they remain 
as they are. 

[0049] Further, since the electronic information is in a 
divided state, the contents of it cannot be restored if ali 
of the infonnation blocks are not acquired. For example, 
if authentication data of the person Itself illustrated in (a) 
of FIG. 2 is divided as seen in (b) of FIG. 2, then even If 
one of the Infonnation blocks is acquired and the infor- 
mation is restored successfully, the information cannot 
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be used as authentication data. Therefore, even If some- 
one accesses the electronic information illegally, it is not 
easy to make It possible to utilize the electronic infonna- 
tion, and the security of the infonnation can be assured. 
5 [0050] The infonnation blocks 3 are stored Into a stor- 
age apparatus or sent to a recipient In accordance with 
an object. 

[0051] A user of the electronic information divides the 
infonnation blocks 3 acquired from the storage or re- 

10 ceived from the transmitting person into original infonna- 
tion elements 4 (A, B, C, ...) and re-arranges the infor- 
mation elements 4 Into a correct order to form a usable 
electronic information file 5 thereby to restore the original 
electronic Information file 1 . 

IS [0052] Basic information necessary to restore the elec- 
tronic infonnation file 1 is division information of the in- 
fonnation elements A, B, C, ... included in the infonnation 
blocks 3 and Information of the position and the length 
of each infonnation element in the electronic Information 

20 file 1 . 

[0053] After all of the infonnation blocks 3 relating to 
the object electronic Infonnation file 1 are collected, the 
infonnation elements in the infonnation blocks 3 can be 
cut out and re~arranged into a correct order using the 

25 infonnation of the top address and the word length of 
each of the information elements 2. 
[0054] Further, when the electronic Infonnation file 1 
is to be restored, infonnation for specifying the object 
electronic infonnation file 1 or information of the order of 

30 arrangement of information elements included in each 
block when the information elements 2 are re-an'anged 
to fomn the information blocks 3 may be utilized. 
[0055] In order to restore the electron^ Infonnation file 
1 , It Is required first to confinn that the collected Infomrta- 

35 tion blocks 3 relate to the object electronic Information 
file 1 and that all relating infonnation blocks have been 
collected without a miss. 

[0056] Further, the electronic information file 5 ob- 
tained by re-dividing the infonnation elements Included 
<o In each block using division information and re-arranging 
them In accordance with the order of an'angement of the 
divided Infonnation elements 4 Is the same as the elec- 
tronic infonnation file 1 . 

[0057] It is to be noted that whether or not the restored 
45 electronic information file 5 and the original electronic 
infonnation file 1 are same as each other can be verified 
with a certain degree of certainty, for example, by com- 
paring the total word lengths of the two with each other. 
[0058] Division and fonnatlon data including such ba- 
50 sic infonnation is produced when the information blocks 
3 are produced and stored or sent separately from and 
independently of the information blocks 3. 
[0059] According to the security assurance method for 
electronic infonnation of the present invention, the 
55 number of the Information blocks 3 con-esponding to the 
single electronic Infonnation file 1 1s not limited to two but 
may be a plural number equal to or greater than three or 
may be one. Since, in any case, the anrangement of in- 
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fomnatton elements in each infonnation block 3 is differ- 
ent from the original arrangement^ a third party cannot 
read out and utilize the electronic information. Conse- 
quently, the security of the electronic information can be 
assured. 

(Embodiment 1 ) 

[0060] In the first embodiment, the security assurance 
method for electronic infomnation of the present invention 
is applied to transmission of an electronic information file 
securely to the other party using a communication path. 
[0061 ] FIG. 3 is a flow diagram illustrating the present 
embodiment, and FIG. 4 is a block diagram of a system 
which uses the present embodiment. 
[0062] First, a basic form of the present embodiment 
is described with reference to FIGS. 3 and 4. 
[0063] An originator of electronic information first pre- 
pares newly or extracts from a database and edits elec- 
tronic information to be transmitted to prepare an elec- 
tronic information file 1 1 (S1 ). An example of subject elec- 
tronic Infonnation is electronic information for which high 
security is required such as authentication data of the 
person Itself or valuable electronic infomiation such as 
software which is sold over a communication path. 
[0064] Then, division software 1 2 is used to divide the 
electronic information file 1 1 into a plurality of information 
elements 13 (S12). To the division software 12, the divi- 
sion position of each of the infomnation elements 13 in 
the electronic infonnation file 1 1 and the word length of 
the infomiation element can be indicated. 
[0065] It is to be noted, instead of indicating the division 
position and the word length of each information element, 
the division software 1 2 itself may detennine the division 
position and the word length if the number of divisions is 
designated. Although the division number can be deter- 
mined arbitrarily, where electronic information up to ap- 
proximately 1 00 kBytes is an object, it may be detemnined 
that a number, for example, equal to or smaller than 100 
Is selected. 

[0066] Then, extraction software 14 is used to distrib- 
ute the infonnation elements 13 into a plurality of infor- 
mation blocks 15 (S3). The extraction software 14 has a 
function of re-arranging the divided infonnation elements 
13 into a different order and another function of distrib- 
uting the infonnation elements 13 into the infonnation 
blocks 15. An operator can Indicate the number of infor- 
mation blocks. 

[0067] Further, the division infonnation and a result of 
the re-arrangement of the information elements 13 are 
converted into division and fonnation data of the elec- 
tronic information 

[0068] It Is to be noted that identification regions XI 
and X2 may include data regarding an originator and a 
recipient, data regarding electronic Information such as 
its preparing person and its owner, data which describes 
a range within which the electronic information can be 
utilized such as an authorized user or a term of validity. 
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data for specifying software to be applied such as inte- 
gration software and so forth. 

[0069] Further, if an ID which Indicates electronic in- 
fonnation is described in an identification region, then 
s since this facilitates assorting of infonnation blocks, this 
is convenient to collect information blocks relating to ob- 
ject electronic infonnation in order for a recipient to re- 
integrate the infonnation blocks to restore an electronic 
infonnation file 

10 [0070] It is to be noted that the division and fonnation 
data is sent to the recipient separately from and inde- 
pendently of the infonnation blocks. 
[0071 ] Then, the Infonnation blocks 1 5 are individually 
placed into packages to be transmitted to transfer sta- 

15 tions 21 (S5). In each of the packages, the address of a 
person to receive the package finally is placed. The pack- 
ages are enciphered and sent to the transfer stations 21 
(86). The enciphenment processing may be performed 
applying a suitable known method. 

20 [0072] In this Instance, different destinations can be 
selected for the individual packages. Communication 
means to be used is selected based on the degree of 
security which depends upon the risk of a communication 
path and the characteristic of the electronic infonnation. 

25 Where leakage or alteration should be minimized, a 
number of communication means as great as possible 
are used. 

[0073] It is to be noted that, when the risk of leakage 
of information is low, an ordinary communication path in 

30 which no transfer station is present may be used. Since 
the security assurance method of the present invention 
has a high degree of security because it places electronic 
infonnation into communication paths in a divided and 
re-arranged state, even if an ordinary communication 

35 path is used, the security assurance method provides a 
sufficiently high degree of security when compared with 
conventional methods. 

[0074] Further, as communication means, for exam- 
ple, a method of using a mail to send a portable storage 
40 device such as a floppy disk or a like method may be 
selected. 

[0075] Each of the transfer stations 21 receiving a 
package deciphers the package to read the destination 
infonnation placed in the package (S7). 

45 [0076] Further, the transfer station 21 enciphers the 
infomfiation blocks placed in the package again and 
sends them to the Indicated recipient (38). 
[0077] Since the information blocks 1 5 are distributed 
in a state wherein contents thereof cannot be discrimi- 

50 nated from their appearance to different transfer stations 
In this manner, even if a third party can acquire the elec- 
tronic information present in the communication path, it 
is difficult for the third party to discriminate and collect 
necessary infonnation, and the third party cannot restore 

S5 the object electronic information. 

[0078] The recipient receives and deciphers infonna- 
tion blocks 31 sent from the transfer stations (S9) and 
then searches the information blocks or the identification 
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region portions of the information elements to collect all 
of the infomnation blocks 31 required to restore the object 
electronic infonnation (S10). 

[0079] Further, the recipient extracts the division infor- 
mation used when the infomnation elements 13 are pro- 
duced and the extraction information used when the in- 
formation blocl<s 15 are produced from the division and 
fonmation data of the identification region portions (S1 1). 
[0080] Then, the recipient re-divides the information 
blocks 31 based on the division information and the ex- 
traction information to cut out the original infonnation el- 
ements 13 (SI 2) and re-arranges the information ele- 
ments 13 into the original orderusing integration software 
32 (SI 3). 

[0081] Finally, the recipient integrates all of the infor- 
mation elements to form an electronic infomnation file 33. 
In this instance, the recipient compares the total length 
of the electronic infonnation file 33 formed by the inte- 
gration with the total length value of the original file in- 
cluded in the division and fonmation data (S14). If they 
coincide with each other, then it can be determined that 
the original electronic information file 1 1 has been regen- 
erated successfully with a considerably high degree of 
probability. Further, it is also possible to use information 
which describes a characteristic of the original or position 
information in which a suitable bookmark is inserted in 
order to conf imn the identity with the original with a higher 
degree of accuracy. 

(Embodiment 2) 

[0082] I n the second embodiment, the electronic infor- 
mation security assurance method of the present inven- 
tion is provided with means for assuring the originality of 
electronic information with a higher degree of reliability. 
[0083] FIG. 5 is a flow diagram illustrating the electron- 
ic information security assurance method of the second 
embodiment provided with means for assuring the orig- 
inality by an originator of electronic infonnation, and FIG. 
6 is a block diagram of the same. 
[0084] In the following, the embodiment of the present 
invention which is provided with means for confimning 
the originality by an originator of electronic infonnation 
is described with reference to FIGS. 5 and 6. 
[0085] It is to be noted that, since the security assur- 
ance method on whteh the present embodiment is based 
is the same as that described hereinabove, in the follow- 
ing description, overiapping description is avoided to 
such a degree that simplification or omission of a portion 
does not cause misunderstanding. 
[0086] When the originator prepares an electronic in- 
formation file 1 1 to be sent, he produces a copy 1 7 from 
the original (S21) and stores the copy 17 (S22). It is to 
be noted that the original 1 1 may be stored in place of 
the copy 1 7, 

[0087] Then, the originator uses division and fonmation 
software 16 to work the original 1 1 of the electronic in- 
formation file based on division information and extrac- 
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tion information given from an operator or produced partly 
by the computer to fomn an infonnation block 1 5 similarly 
as in the first embodiment described hereinabove (S23). 
It is to be noted that, where the original 1 1 is stored, the 
s copy 1 7 is selected as the subject of the wortdng. 
[0088] The infomnation blocks 1 5 are individually sent 
to transfer stations 21 simtlariy as in the first embodiment 
(S24). 

[0089] The transfer stations 21 transfer the received 
10 infonnation blocks 1 5 to the designated recipient (S25). 
[0090] The recipient checks the received infonnation 
blocks 31 to collect all of the infonnation blocks 31 nec- 
essary to restore the object electronic infonnation (S26). 
[0091] Thereafter, the recipient uses integration soft- 
15 ware 32 to extract infonnation elements in the information 
blocks 31 based on the extraction infonnation and the 
division infonmation included in the acquired division and 
formation data and re-anrange and integrate the informa- 
tion elements to fomn an electronic infonnation file 33 
20 (S27). 

[0092] Further, the recipient produces a copy 35 of the 
fonned electronic infonnation file 33 (S28) and sends 
back the copy 35 to the originator of the electronic infor- 
mation through a transfer station 22 by a similar method 

25 to that in the transmission from the originator (S29). Pref- 
erably, a plurality of transfer stations are used for the 
transfer station 22 in this instance similarly as in the case 
of the transmission- Further, the copy 35 to be sent back 
is preferably enciphered to raise the security. 

30 [0093] The originator compares the received copy 35 
of the restored electronic information file and the copy 
1 7 stored therein with each other to oonfinn the identity 
between them (S30). 

[0094] If the two do not coincide with each other, then 
35 since the copy 35 cannot be used as the electronic infor- 
mation, a notification of this is issued (S31). If the recip- 
ient does not receive a warning notification from the orig- 
inator, then it can discriminate that the restoration of the 
information file has been performed normally (S32). 
40 [0095] It is to be noted that, if the two files do not co- 
incide with each other, then since this represents that 
some trouble has occurred during the communication, a 
cause must be found out and excluded so that later com- 
munication may be perfonned securely. If the cause can- 
^ not be excluded, then preferably the communication 
means is changed. 

[0096] Where the originator confinns that restoration 
of electronic infonnation by the recipient has been per- 
fonned correctly in this manner, electronic infonnation 
50 exchange of very high reliability is realized. 

(Embodiment 3) 

[0097] The third embodiment is an originality assur- 
55 ance method for electronic information wherein the se- 
curity assurance method for electronic infonnation of the 
present invention is provided with means for confimning 
the originality of each infonnation block to detect abnor- 
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mality of individual communication paths to further facil- 
itate a countemieasure. 

[0098] FIG. 7 is a flow diagram Illustrating the present 
embodiment, and FIG. 8 is a block diagram of a system 
which uses the present embodiment. In the following, the 
present embodiment is described in detail with reference 
to FIGS. 7 and B. 

[0099] It is to be noted that, also in the present embod- 
iment, overlapping description is avoided by simplifying 
or omitting the same portion as that described already. 
[01 00] Similarly as in the first embodiment, an origina- 
tor prepares an electronic infomiation file 1 1 to be trans- 
mitted (S41), and cuts out and shuffles infomnation ele- 
ments based on division information and extraction in- 
formation to form information blocks 15 (842). 
[0101] Then, the originator produces a copy from the 
information blocks 15 and stores the copy (S43). 
[0102] - Then, the originator sends packages in which 
the information blocks 15 are placed to transfer stations 
21 by the same method as in the first embodiment (S44). 
The transfer stations 21 decipher the packages to read 
the the address of a recipient and transfers the informa- 
tion blocks 15 to the designated recipient again (845). 
[0103] The recipient produces a copy of the received 
information blocks 31 (S46) and sends back the copy to 
the originator through a transfer station 23 (S47). 
[0104] The originator verifies the copy of the informa- 
tion blocks 31 sent back thereto and the copy of the orig- 
inal infomiation blocks 15 stored therein with each other 
to confinn whether or not they coincide with each other 
(848). 

[0105] If the two coincide with each other, then since 
the information blocks 31 have not been subject to alter- 
ation during the communication, they can be used as 
they are to restore the electronic information. 
[01 06] On the other hand, when the two do not coincide 
with each other, this represents that a communication 
path which has been used for transmission of an infor- 
mation block is abnomnal. While detection of abnormality 
is possible in the second embodiment described above, 
since abnonmality Is detected in an integrated fonm of all 
communication paths, it is difficult to specify a commu- 
nication route which is abnormal. However, where the 
method of the present embodiment is used, the abnormal 
route can be specified simply as described above. Ac- 
cordingly, also it is easy to take a countermeasure such 
as removal of the trouble. 

[0107] A notification of a result of the verification per- 
formed by the originator is sent to the recipient (849). 
[0108] If the result of the verification proves that the 
two copies coincide with each other, then the recipient 
uses integration software 32 to perform restoration of the 
electronic information file in accordance with a procedure 
same as that In the first embodiment (S50). Integrated 
data 33 fomned from the information blocks 31 become 
a file 34 having the same contents as those of the original 
electronic information file 11. 

[01 09] It is to be noted that, as described hereinabove 
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in connection with the first embodiment, exchange of 
electronic information may be performed using a com- 
munication path in which such transfer stations 21 or 23 
as described above are not present 

5 [01 1 0] Further, the transfer stations may store the in- 
formation blocks transmittedfrom the transmitting person 
and then transmit the infonmation blocks In accordance 
with a request of the recipient. The recipient collects all 
infomiation blocks and integrates, restores and uses 

10 them. 

(Embodiment 4) 

[01 1 1 ] According to the fourth embodiment, the secu- 
15 rity assurance method for electronic infomiation of the 
present invention is applied to storage of an electronic 
infomiation file into an external storage apparatus of a 
computer system. 

[01 1 2] FIG. 9 is a block diagram of a computer system 

20 which uses the security assurance method for electronic 
infonmation of the present embodiment. 
[0113] In the following, the present embodiment is de- 
scribed With reference to the drawing. 
[0114] It is to be noted that, since operations and ef- 

25 fects of the components of the present embodiment are 
much common to those of the embodiments described 
hereinabove, like components having like functions to 
those in the embodiments described above are denoted 
by like reference numerals and the description of them 

30 is simplified to prevent overtapping description. 

[0115] An electronic information file 41 prepared by a 
computer system is divided into infomiation elements 
and re-arranged by division and formation software 42 
so that it is distributed into a plu rality of infonmation blocks 

35 43 and then stored into a storage apparatus 50. 

[01 16] When the electronic information file 41 is to be 
extracted from the storage apparatus 50, information 
blocks 61 which carry the subject electronic information 
are all collected and integration software 62 is executed 

^ The integration software 62 extracts division infomiation 
and extraction information from the information blocks 
61 , cuts out the infomiation elements in the infomiation 
blocks 61 based on the infomiation, re-arranges the in- 
formation elements into the original order and integrates 

45 them to produce an electronic information file 63. 

[0117] Where the electronic information security as- 
surance method of the present embodiment is used, 
since an electronic information file stored in the storage 
apparatus 50 is divided in a plurality of Infomiation blocks, 

50 it is difficult to collect all relating infomiation blocks so 
that object electronic information may be restored. Fur- 
ther, since infonnation elements in the infomiation blocks 
are scattered tike paper infomiation broken by a shred- 
der, also it is not easy to regenerate part of electronic 

55 information. 

[01 1 8] Leakage of information through accessing from 

the outside can be prevented in this manner. 

[01 1 9] It is to be noted that electronic information may 
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be enciphered when it is to be recorded into the storage 
apparatus 50. 

[0120] Further, the storage apparatus 50 need not be 
a single storage apparatus, and electronic infonnatlon 
may be stored into storage apparatus separate from each 
other for individual infonmation blocks. 
[0121] The electronic infonmation security assurance 
method of the present embodiment can be applied when 
an authentication station for which the security is required 
particularly stores authentication data of the person itself 
Into an external storage apparatus such as a hard disk 
apparatus or a magnetic tape apparatus. 

(Embodiment 5) 

[0122] In the fifth embodiment, the security assurance 
method for electronic infomnation of the present invention 
is provided with means for making use of part of electronic 
information to secure the originality of the electronic in- 
formation. FIG. 1 0 is a block diagram illustrating original- 
ity assurance means used in the present embodiment. 
Since the security assurance method for electronic infor- 
mation on which the present embodiment is based is the 
same as that described hereinabove, in the following de- 
scription, overiapping description of the portion is simpli- 
fied or omitted to prevent overiapping explanation. 
[01 23] FIG. 1 0 illustrates a case wherein, as an exam- 
ple of fomn of use of the present invention, an electronic 
infomnation file is divided Into seven information elements 
and divided into two infomriation blocks. 
[0124] The order of arrangement of the divided infor- 
mation elements A, B, C, D, E, F and G is changed, and 
they are grouped suitably so that they are distributed into 
two infomnation blocks. In this instance, some of the in- 
formation elements are included commonly as key ele- 
ments into both of the information blocks. Further, iden- 
tification regions X1 and X2 in which ID Information of 
the electronic file and so forth are recorded are annexed 
to the infomnation blocks so that they can be utilized for 
restoration. 

[0125] In the example illustrated in FIG. 1 0, the infor- 
mation elements A, 6, C, E and F are distributed in the 
left information block while the information elements B, 
D, E and G are distributed in the right infomnation block, 
and the information elements B and E are included as 
key elements in both of the information blocks. Since the 
information elements in each infomnation block are 
changed in order suitably and are not arranged signifi- 
cantly, even if the infomnation block is read by a third 
person, contents of the electronic Information cannot be 
read as they are. The information blocks are stored into 
a storage apparatus or sent to a recipient in accordance 
with an object. 

[01 26] A user of the electronic infomnation divides the 
acquired infonmation blocks into the original information 
elements (A, B, C, ...) based on the information recorded 
in the identification regions X1 and X2, and re-arranges 
the information elements into a correct order to restore 
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the original electronic information file. 
[0127] iJpon restoration, the infomnation elements B 
and E which are included in an overiapping relationship 
in the two information blocks and serve as key elements 

5 are detected and verified individually with each other. 
Thus, if any of the infomnation blocks has been subject 
to some alteration upon storage or transmission of the 
information, then since the contents of the overiapping 
infomnation elements do not coincide with each other, 

10 the abnormality can be detected simply. 

[01 28] According to the abnomnality detection method 
used in the present embodiment, since a key element 
which is a subject of verification can not be extracted even 
if an information block is observed by itself, an attack of 

15 a third party can be prevented readily. Further, no special 
additional infomnation is required, and infomnation 
processing for confimnation of the security Is simple. 
[0129] It is to be noted that naturally the abnormality 
detection method of the present embodiment may be 

20 used together with any other method to improve the se- 
curity. 

(Embodiment 6) 

25 [0130] The sixtii embodiment relates to a certification 
station or a certification authority which applies the se- 
curity assurance method for electronic infomnation of the 
present invention to divide and store information into sev- 
eral places and accurately perform various verifications 

30 of transaction contents and so forth between the parties 
concerned. 

[0131 ] FIG. 1 1 is a block diagram illustrating a function 
of a certification station or authority to whteh the present 
invention is applied. Since the security assurance meth- 

35 od on which the present embodiment is based is the same 
as that described hereinabove, in the following descrip- 
tion, a portion describing the certification authority is de- 
scribed in detail while overlapping description of the other 
portion is avoided. 

40 [01 32] A first party I and a second party II convert mu- 
tually consented transaction contents into electronic in- 
fomnation and store the electronic infomnation. However, 
since an electronic document leaves no marks even if it 
is rewritten, the originality of it cannot be secured. Ac- 

45 cordingly, in orderto minimize the possibility of the future 
dispute, it is demanded to utilize a certification authority 
CA, which is a third party organization in which confi- 
dence can be placed, to deposit contents of a transaction 
and, when necessary, to receive a presentation of and 

50 confirm the original. 

[0133] IHowever, where an original is recorded in its 
full text, a very great storage capacity is required for the 
certification authority CA. Further, even the certification 
authority CA may possibly suffer from alteration, and if it 

55 is tried to completely secure the genuineness of electron- 
ic infomnation, then considerable difficulty is involved in 
management and administration of the certification au- 
thority CA. 
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[0134] The present embodiment is configured by ap- 
plying the electronic infomiation security assurance 
method of the present invention and is an authentication 
system wherein the burden on the certification authority 
CA is low and the originality of electronic information can 
be secured with a high degree of certainty. 
[0135] The parties I and II concemed divide contents 
of the mutual agreement into information blocks A, B and 
C based on the method of the embodiments described 
hereinabove. The first party I concemed stores the first 
information block A while the second party II concerned 
stores the second information block C. Further, the third 
information block B is deposited to the certification au- 
thority CA. 

[0136] In such an authentication system described 
above, if any of the organizations alters its record, the 
original cannot be restored. Accordingly, the actually re- 
stored electronic information conveys the contents of the 
original correctly. Therefore, the certification authority CA 
can secure the originality of the restored electronic Infor- 
mation only by recording a very small part of the original. 
Since the storage capacity to be possessed by the cer- 
tification authority CA is reduced and the full text of con- 
tents of the agreement need not be stored, also the stor- 
age responsibility of the certification authority CA is mod- 
erated. 

Industrial Applicability of the Invention 

[01 37] As described in detail above, since the security 
assurance method for electronic infomnation of the 
present Invention divides an electronic infomnation file 
once into information elements, re-arranges and places 
the infomnation elements separately Into infomnation 
blocks and then places the information blocks into com- 
munication paths or stores the information blocks into a 
storage apparatus, even if a third party steals an infor- 
mation block being communicated or stored, because 
small infomiation elements are placed in ascatteredform 
in the Infomiation block and contents of the electronic 
information cannot be read or discriminated, leakage of 
the secret can be prevented. Further, when the electronic 
information is to be restored, the originality of the elec- 
tronic information can be confirmed readily. It Is to be 
added that, where a communication result received over 
a communk:ation path by a recipient or a restored elec- 
tronic infomnation file Is sent back to Its originator and 
verified with a stored copy, the originality can be secured 
with a very high degree of reliability. 



Claims 

1 . A method for assuring security of electronic informa- 
tion, wherein an electronic infoimatlon file (1) is di- 
vided into a plurality of infomnation elements (2); the 
divided infomiation elements (2) are selected and 
combined with their order changed to produce three 



or more Infomnation blocks (3) such that, only in the 
case in which all of the information blocks are pro- 
duced, all of the infomnation elements (2) are includ- 
ed; characterized In that division and fonnatlon da- 

5 ta, in which division information on the division of 
said information elements and fomnation information 
on the formation of the information blocks are record- 
ed, is produced; said information blocks as well as 
the division and fomnation data are separated; at 

10 least one of said Information blocks (3) as well as 
the division and formation data separated is trans- 
mitted to and stored into a certification station while 
at least another one of said Information blocks Is 
stored by a first party and the at least one remaining 

'5 information block is stored by a second party; and 
when the authenticity of said electronic infomiation 
is to be conflmned, all of the information blocks (3) 
as well as the division and formation data including 
that stored in the certifteation station are collected 

20 and said information blocks (3) are redivided into the 
original information elements, re-an'anged in the cor- 
rect order and integrated based on said division and 
fomnation data to restore the original electronic in- 
fomnation file. 

25 

2. A method for assuring security of electronic infomna- 
tion according to claim 1 , characterized In that said 
infomiation blocks (3) and the division and formation 
data are stored into an external storage apparatus, 

30 and said extemal storage apparatus is disconnected 
from the system to keep the electronic infomnation 
in security therein. 

3. A method for assuring security of electronto infomna- 
35 tion according to claim 1 or 2, characterized In that 

one or more infonmation elements selected from 
among said infomnation elements (2) is included into 
each of a plurality of infomnation blocks (3), and when 
the infomnation elements (2) are integrated, the iden- 
"fo tity of the above selected information elements in- 
cluded in each of the different information blocks (3) 
is verified to confimi the authenticity of the infomna- 
tion. 

^ 4. A method for assuring security of electronic infomna- 
tion according to claim 3, characterized in that at 
least one of said information blocks (3) and said di- 
vision and fomnation data is transmitted to the recip- 
ient by second transmission means (21) different 
50 from the transmission means (21 ) for the other elec- 
tronic infomnation. 

5. A method for assuring security of electronic infomna- 
tion according to claim 4, characterized in that a 
55 transfer station is interposed in said transmission 
means of said second transmission means, and a 
block of the infomnation to be sent by said transmis- 
sion means is accomodated into an infomnation 
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package together with destination infomation and 
sent to said transfer station, which in turn transfers 
the information block to said recipient based on said 
destination information. 



Patentanspruche 

1. Verfahren zur GewShrleistung der Sicherhelt elek- 
tronischer Infonnationen, wobei eine elektronische 
Informationsdatei (1) in eine Mehrzahl von Informa- 
tionselemente (2) geteilt wind; die eingeteilten Infor- 
mationselemente (2) ausgew&hit und mit verdnder- 
ter Reihenfolge kombiniert warden, urn drei Oder 
mehr lnformationsbl5kke (3) so herzustellen, dass 
nurinjenem Fall, in dem alle derlnformationsb!6cke 
hergestellt werden, alle der Infomnationselemente 

(2) enthalten sind; dadurch gekennzeichnet, dass 
Teiiungs- und Formationsdaten, in wetchen Tel- 
iungsinformationen uber die Teilung besagter tnfor- 
mationselemente und Fonnationslnfonnationen 
Ober die Fomiation der Infonmationsbldcke aufge- 
zeichnet werden, erzeugt werden; sowohl besagte 
Informationsblocke als auch die Teiiungs- und For- 
mationsdaten getrennt werden; sowohl mlndestens 
einer besagter Infomnationsbldcke (3) als auch die 
getrennten Teiiungs- und Fonnationsdaten zu einer 
Zertifizierungsstelle Qbertragen und dort gespei- 
chert werden, wShrend mlndestens ein weiterer be- 
sagter Informationsblocke von einem ersten Betei- 
ligten gespeichert wird und der mlndestens eine ver- 
bleibende infonnationsblock von einem zweiten Be- 
teiligten gespekshertwird; undwenndie Authentizit&t 
besagter elektronischer tnfomiationen zu bestStigen 
ist, sowohl alle der Infomnationsblocke (3) als auch 
dieTeilungs-und Formationsdaten einschlieBlichje- 
ner, die in der Zertifizierungsstelle gespeichert sind, 
gesammelt werden und besagte Informationsblocke 

(3) wieder in die ursprOnglichen Informationsele- 
mente eingeteilt werden, emeut In der richtigen Rei- 
henfolge geordnet werden und Integiiert werden ba- 
sierend auf besagten Teiiungs- und Fonnationsda- 
ten, urn die ursprQngliche elektronische Informati- 
onsdatei wiederherzustellen. 

2. Vertahren zur Gewahrleistung der Sicherheit elek- 
tronischer infonmationen nach Anspruch 1 , dadurch 
gekennzeichnet, dass besagte Infomriationsbldcke 
(3) und die Teilungs-und Fonnationsdaten In einem 
extemen Speichergerat gespeichert werden, und 
besagtes externes Speichergerat von dem System 
getrennt ist, um die elektronischen Informationen in 
demselben sicher zu bewahren. 

3. Verfahren zur Gew§hrteistung der Sicherheit elek- 
tronischer Infomnatlonen nach Anspruch 1 Oder 2, 
dadurch gekennzeichnet, dass ein Oder mehr In- 
form ationselemente, die aus besagten Infomiations- 



elementen (2) ausgewShIt werden. In jedem aus ei- 
ner Mehrzahl von infomriationsbldcke n (3) enthalten 
sind, und wenn die Informationselemente (2) inte- 
grlert werden, die Identitdt der obig ausgewShlten 
s infonnattonselemente, die In jedem der verschiede- 
nen Informationsbl6cke (3) enthalten sind, veriflzlert 
wind, um die Authentizit^t der Infonnationen zu be- 
st&tigen. 

10 4. Verfahren zur Gewahrleistung der Sicherheit elek- 
tronischer Informationen nach Anspruch 3, dadurch 
gekennzeichnet, dass mlndestens einer der be- 
sagten lnformationsbl6cke (3) und besagte Tel- 
lungs- und Formationsdaten an den EmpfSnger 

15 durch zweite Ubertragungsmlttel (21) ubertragen 
werden, die sich von den Ubertragungsmittein (21) 
fur die anderen elektronischen Infonnationen unter- 
scheiden. 

5. Verfahren zur Gewahrleistung der Sicherheit elek- 
tronischer Informationen nach Anspruch 4, dadurch 
gekennzeichnet, dass eine Transferstelle in be- 
sagte Ubertragungsmlttel besagter zweite r Ubertra- 
gungsmlttel eingeschoben ist, und ein Block der In- 
formationen, die durch besagte Ubertragungsmlttel 
zu senden sind. In einem Informationspaket zusam- 
men mIt Bestlmmungsortinfomriationen unterge- 
bracht und zu besagter Transferstelle gesendet wird, 
welche ihrerseits den Informatlonsblock an besag- 
ten Empfanger basierend auf besagten Bestim- 
mungsortinfomnationen transferiert. 



Revendications 

35 

1. Procede pour assurer la securite d'informations 
^lectroniques, dans lequel un dossier d'informations 
^lectroniques (1) est divis6 en une plurality d'ele- 
ments d'infomnation (2) ; les ^l^ments d'infonnation 

40 divlsSs (2) sont s6lectlonn6s et combines, leur ordre 
6tant change, pour produire trols blocs d'lnfomna- 
tions ou plus (3) de telle sorte que, seulement dans 
le cas ou tous les blocs d'informations sont produits, 
tous les Elements d'information (2) sont Indus ; ca- 

45 racterise en ce que des donn^es de division et de 
formation, dans lesquelles les Informations de divi- 
sion Ions de la division desdits ^l^ments d'lnfonna- 
tion et les Infomnatlons de fomnation lors de la for- 
mation des blocs d'infomriations sont enregistr^es, 

50 sontproduites ; lesdits blocs d'infomriations ainsi que 
les donn6es de division et de fonnation sont 
s6par6s ; au moins I'un desdits blocs d'informations 
(3) ainsi que les donn^es de division et defomriation 
sSpar^es sont transmis & et stock^s dans un poste 

ss de certification tandls qu'au moins un autire desdits 
blocs d'informations est stocks par une preml&re 
partie, etau moins un bloc d'informations restantpr6- 
c\i6 est stocks par une deuxl^me partie ; et lorsque 
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rauthenticit6 desdites infonnations 6lectroniques 
doit dtre confirmee, tous les blocs d'informations (3) 
ainsi que les donn^es de division et de formation 
incluant celles stock^es dans le poste de certification 
sont recuelllies, et lesdits blocs d'infomnations (3) s 
sont re-divisSs en 6l6ments dlnformation initiaux, re- 
dispos^s dans I'ordre correct et int^gr^s sur la base 
desdites donn^es de division et de fomnation pour 
r^tablirle dossier d'infonnations 6lectroniques initial. 

10 

2. Proc6dd pour assurer ta s6curit6 d'infomnations 
^lectroniques selon ta revendication 1 , caracterise 
en ce que lesdits blocs d'infonnations (3) et les don- 

n6es de division et de formation sont stock6s dans 
un apparei) de stockage exteme, et ledit appareii de is 
stockage externe est d6connect6 du systfeme pour 
consen^er les infonnations ^lectroniques en s6curit6 
dans celui-ci. 



3. ProcSd^ pour assurer la s^curitS d'infonmations 20 
^lectroniques selon la revendication 1 ou 2, carac- 
terise en ce qu'un ou plusieurs 6I6ments d'informa- 
tion s^lectionn^s panni lesdits ^l^ments d'informa- 
tion (2) sont Indus dans chacun d'une plurality de 
blocs d'infonnations (3), et lorsque les Pigments d'in- 25 
fomnation (2) sont int^grSs, I'identit6 des Sl^ments 
d'infomnation selection n6s ci-dessus inclus dans 
chacun des diff^rents blocs d'infonnations (3) est 
v6rifi6e pour conf inner I'authenticite de Tinfonmation. 

30 

4. Proc^d^ pour assurer la s^curit^ d'infonnations 
^lectroniques selon la revendication 3, caracterise 
en ce qu*au moins I'un desdits blocs d'infonnations 
(3) et desdites donn^es de division et de formation 

est transmis au r§cepteur par des deuxi^mes 35 
moyens de transmission (21) qui different des 
moyens de transmission (21) pour les autres infor- 
mations ^lectroniques. 

5. Proc6d6 pour assurer la s6curit6 d'informations ^ 
Slectroniques selon la revendication 4, caract6ris6 

en ce qu'un poste de transfert est interpose dans 
ledit moyen de transmission dudit deuxifeme moyen 
de transmission, et un bloc des infonnations k en- 
voyer par ledit moyen de transmission est log6 dans 
un paquet d'informations ensemble avec des infor- 
mations de destination et est envoys audit poste de 
transfert qui, k son tour, transfere le bloc d'informa- 
tions audit rteepteur sur la base desdites informa- 
tions de destination. so 
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